http://rdist.root.org/2009/10/23/just-another-day-at-the-office/ Embedded security, crypto, software protection Mon, 08 Mar 2010 21:19:29 +0000 http://wordpress.com/ hourly 1 http://rdist.root.org/2009/10/23/just-another-day-at-the-office/#comment-5414 Mike Hearn Thu, 29 Oct 2009 10:26:29 +0000 http://rdist.root.org/?p=450#comment-5414 Looks like they removed the links themselves but not the obfuscated JavaScript at the bottom. It's an interesting piece of code. A few minutes analysis shows that it's 90% randomly generated junk, with some basic string obfuscation to conceal the document.write("blah { display:none }") call. Looks like they removed the links themselves but not the obfuscated JavaScript at the bottom. It’s an interesting piece of code. A few minutes analysis shows that it’s 90% randomly generated junk, with some basic string obfuscation to conceal the document.write(“blah { display:none }”) call.

]]> http://rdist.root.org/2009/10/23/just-another-day-at-the-office/#comment-5413 Nate Lawson Tue, 27 Oct 2009 17:29:35 +0000 http://rdist.root.org/?p=450#comment-5413 Yes, it appears their site had link spam injected. I'll let them know, thanks. Yes, it appears their site had link spam injected. I’ll let them know, thanks.

]]> http://rdist.root.org/2009/10/23/just-another-day-at-the-office/#comment-5412 Gabriel Mon, 26 Oct 2009 18:35:50 +0000 http://rdist.root.org/?p=450#comment-5412 Interesting. If you look at Flylogic’s website without JavaScript, you’ll see they’re link spamming a [pirate] software vendor. Pwn3d? Interesting. If you look at Flylogic’s website without JavaScript, you’ll see they’re link spamming a [pirate] software vendor. Pwn3d?

]]>